Information the service processes
Account information includes your name, email address and authentication records. Google sign-in may provide a profile image. We receive the photograph you deliberately upload, your consent confirmation, generation settings, job status, private output files and credit transactions.
Your first visit may be recorded with its referring site, landing path, language and UTM source, medium and campaign. A first-party cookie preserves this information for up to 30 days until you create an account. It is used to understand acquisition, not to track you across other websites.
Why the information is needed
Account data enables sign-in and private access. Photos are sent for suitability assessment and generation only when you upload them after confirming permission. Job and payment records provide downloads, credit accounting, fraud protection and support.
We do not publish your photos or videos in an example gallery without a separate permission request. We do not use uploaded photos to train our own models. An automated suitability check can reject an uncertain image; it is not proof of age, identity or consent.
Service providers
Cloudflare provides hosting, the D1 database and private R2 object storage. fal.ai runs the Wan 2.2 Animate video model and the Google Gemini 2.5 Flash photo check; the photo check is routed through OpenRouter. Cloudflare Email Service sends sign-in and operational emails, with Resend as a backup. Waffo Prompt Sift checks the fixed scene description, which contains no personal data. Google is involved if you choose Google sign-in.
Checkout uses the configured provider, Waffo Pancake or Stripe. Card details are entered on the payment provider’s hosted checkout and are not stored in this website’s database. Providers process information under their own terms; processing may occur outside your country.
Retention and deletion
Uploaded photos and generated videos expire after at most 30 days and are purged by the scheduled cleanup. You can delete completed videos sooner from My videos. Downloaded copies you or another recipient save are outside the service’s control.
Authentication, credit and payment records may be retained longer for account operation, security, refunds and legally required accounting. Contact us to request account deletion, correction or access. Records that must legally be retained are limited rather than automatically erased.
Cookies and your choices
Sign-in uses first-party session and verification cookies. The first-visit attribution cookie is described above. If you choose a photo before signing in, the browser can retain a local draft so an OAuth redirect does not lose your selection. The draft is valid for 30 minutes and is removed on a later draft check, accepted generation or sign-out. This version includes no third-party advertising trackers or optional analytics scripts.
Use the contact page for privacy requests, correction, access, objection or deletion. Where applicable, you can complain to your local data-protection authority. This service is intended for adults; do not upload photos of minors.
Questions, answered.
Are my videos public?
No. Video playback and download require your signed-in account. Short-lived signed links are issued only to the processing providers for the job inputs.
How do I delete a completed video?
Open My videos, choose the completed video and select Delete video. Use the contact page for account-wide requests.